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API Management 


Scale Your Digital Business with Faster, More Secure APIs 


NGINX Controller is a robust API management solution that fully leverages the power of the lightweight, simple, 


and high-performance NGINX Plus data plane. 


The Problem 


APIs are crucial to an enterprise’s digital transformation strategy. 
APIs foster internal collaboration among developers, provide an 
opportunity to generate revenues by building partnerships 
with third-party developers, and are foundational to application 


modernization initiatives that use microservices. 


NGINX is the industry’s most ubiquitous API gateway, handling 


API routing, security, and authentication. 


Infrastructure & Operations and DevOps teams must grapple with 
many challenges as APIs gain wide adoption both internally and 
externally and the numbers of APIs and API gateways increase. 
APIs need to be managed in an efficient manner across their 
entire lifecycle and API gateways must be updated with the latest 
API policies. API management must not degrade the performance 
of the gateway itself, which is responsible for routing and 


mediating traffic. 


The Solution 


The NGINX Controller API Management Module combines the raw 
power and efficiency of NGINX Plus as an API gateway with new 
control-plane functionality. NGINX Controller empowers teams to 
define, publish, secure, monitor, and analyze APIs, while keeping 


developers in control of API design. 


NGINX Controller eliminates the need for local databases or additional 
components that may introduce needless complexity, latency, and 
potential points of failure for NGINX Plus API gateways. API runtime 
traffic is isolated from API management traffic because the NGINX Plus 
API gateway (data plane) does not require constant connectivity to 
NGINX Controller (control plane). This maximizes performance by 
reducing the response time to serve an API call and minimizes the 
footprint and complexity of the gateway. This decoupled approach 
extends to the Developer Portal too — it can be hosted on a separate 
NGINX web server, improving its performance and availability and 


providing considerable flexibility. 


Why NGINX Controller for API Management? 


Deliver APIs in Real Time 


A radically innovative architecture that decouples 
the control plane from the data plane makes 
the NGINX API management solution ideal for and hybrid clouds 


serving APIs in real time 
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Flexible and Portable 


Deploy API management on any environment — 


bare metal, VMs, containers, and public, private, 
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Scale Your Business 


Integrate API management into your CI/CD pipe- 
lines, and automate definition and publication 


of your APIs and configuration of your gateways 


© NGINX is a part of F5 


: NGINX Controller 


: API Mana 


{ api} 


Define 


we F 

eS 

pa OpenAPI GUI 
Specifications 


Monitor 


NGI 
Controller 


IT OPS / DEV OPS 


NN 
(ov Xos) 
A NNA 
REST API 
NOX 
O 
Analyze 


gement 


NX 


APPDYNAMICS FA pataDoG €pdynatrace G) 


© New Relic Prometheus servicenaw 


API Management Module Features 


API Definition and Publication 
Define APIs using an intuitive interface: 


« Define base path and backend services 

« Route APIs to appropriate backend services 
e Manage versioning of APIs 

e Import APIs that follow OpenAPI standard 


e Create REST-to-SOAP proxies with JSON->XML transformatio 
by importing WSDLs that describe SOAP APIs 


e Publish APIs to one or more environments, 
such as production or staging 


My API Definitions 


Create Published API 
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Dev Portals 
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API Gateways 
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NGINX App Protect WAF 


APIs 


Accelerated API Release Velocity 


Integrate API management into DevOps workflows and CI/CD 
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e Define and publish APIs 
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nfigure API gateways 
nfigure security policies for published APIs 


ploy and run on containers 


ploy API gateways inside Kubernetes clusters 


metadata" 
"name": "ticketprocessing. internal.acmefinancial.net", 


"tags" 


desiredState": 
“apiDefinitionVersionRef": 
"ref": "/services/api-definitions/ticketprocessing. internal.acmefi 


“gatewayRefs": | 


"ref": "/services/environments/lending-prod/gateways/star. interna 


"basePath": "/" 


API Management Module Features 


Authentication and Authorization 

e Validate JSON Web Tokens (JWTs) 

+ Create and manage API keys for consumers 
e Import API keys from external systems 

e Share with API consumers 


+ Apply policies to groups of API clients 


Create App Component 


Authentication 
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Advanced Security 


Protect APIs with a modern WAF: 


+ Apply out-of-the-box protection against OWASP Top 10 and other 
vulnerabilities, based on F5’s market-leading WAF technology 


Secure your APIs at runtime by deploying and managing WAF 
across a distributed environment colocated with the API gateway 


Accelerate shift-left movement and minimize security issues in 
production by integrating WAF into DevOps workflows 
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Web Application Firewall (WAF) 
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Disable Signatures 


Rate Limiting 


Mitigate DDoS attacks and protect your applications by setting 
rate limits: 


+ Specify the maximum request rate for each client, consumer, 
or resource 


« Protect API endpoints and ensure SLAs for API consumers 


e Define multiple rate-limiting policies 


Create App Component 


Real-Time Monitoring and Alerting 


Get critical insights into API performance: 


active connections, and bandwidth usage 


Alerts on more than 100 metrics such as CPU 


Graphs of key metrics such as latency and response duration 


Gateway-specific metrics such as requests per second, 


usage, 4xx/5xx 


errors, and health check failures, based on predefined thresholds 
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ServiceCenterACMEFinanc — SeryiceCenter.ACMEFinancial.net 


Developer Portal 


Easy integration with any monitoring tool of your choice using 


The Developer Portal is deployed on its own NGINX web 
server so that it is decoupled and logically located separate from 


NGINX Controller for added performance and u 
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- Catalog of all published APIs 
- Documentation 

- Sample code 


> Gai 


/drivers 


Sports App an | 
REQUEST 


Introduction 


URL 


© GET hupy/apisportsappio/drivers 


PARAMETER Tve 


Account Information API 


Deploy multiple portals (for example, one for external APIs and 
one for internal APIs) with differential access ri 


ghts or branding 


Quickly generate the following for efficient onboarding of developers 


Location 
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API Management Module Features 


Dashboards 
Monitor and troubleshoot API gateways quickly with: Dashboards Overview maom 
e An overview dashboard that aggregates metrics across pes | Tota request HTTP Soa eors 
API gateways a 5k xO 5 
e An Application Health Score that measures successful requests p 
and timely responses ~ 
+ Customizable dashboards to monitor metrics specific to paren ei |. —_ 
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NGINX Controller 
The First App-Centric, Multi-Cloud Application Platform for Modern App Teams 


From NetOps to DevOps, modern app teams need a self-service, APl-driven platform that integrates easily into Cl/CD workflows to accelerate app 
deployment — whether your app has a hybrid or microservices architecture — and makes app lifecycle management easier. 


Built to manage NGINX Plus instances, NGINX Controller is cloud-native, secure, and high-performance. 


Ready to experience lightning-fast application delivery and API management? Request a free trial today. 
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Bare Metal Containers VMs Private Cloud Public Cloud Hybrid Cloud 


To discover how NGINX can help you, visit nginx.com. 
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